Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Included redis for Windows contains security vulnerabilities #14

Open
codemonstur opened this issue Mar 17, 2023 · 3 comments
Open

Included redis for Windows contains security vulnerabilities #14

codemonstur opened this issue Mar 17, 2023 · 3 comments

Comments

@codemonstur
Copy link
Owner

The library includes version 5.0.14 for Windows. This version has known vulnerabilities. Result of DependencyCheck plugin:

redis-server-5.0.14.1-windows-amd64.exe (cpe:2.3:a:redis:redis:5.0.14.1:*:*:*:*:*:*:*) : CVE-2022-24735, CVE-2023-25155, CVE-2022-24736, CVE-2022-36021, CVE-2022-3647
@codemonstur
Copy link
Owner Author

I would love to update to a later version but I don't have a source newer than this.

@codemonstur codemonstur mentioned this issue Mar 17, 2023
Merged
@codemonstur codemonstur changed the title Included redis version contains security vulnerabilities Included redis version for Windows contains security vulnerabilities Mar 17, 2023
@codemonstur codemonstur changed the title Included redis version for Windows contains security vulnerabilities Included redis for Windows contains security vulnerabilities Mar 17, 2023
@deathwatcher
Copy link

You can download the sources hear https://github.com/redis-windows/redis-windows/tags

@codemonstur
Copy link
Owner Author

@deathwatcher when I said 'I don't have a source' I meant not having a source for binaries. The redis sources are useless, I can't compile the code on every system that I need them on.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
2 participants
@codemonstur @deathwatcher